Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa
File: feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa (raw, json)
Hash identifier: 1VtKDy0NnVGWK+J8ior3R9er6+JBCpKDAMwv8yOkvdA=
Subject key identifier: CA:47:F6:BC:92:E8:09:09:CC:E4:3F:6E:E6:E4:B5:38:32:35:8B:5E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF0C0617
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa
Signing time: Sat 13 Jun 2020 18:58:20 +0000
ROA not before: Sat 13 Jun 2020 04:00:00 +0000
ROA not after: Sun 03 Mar 2030 05:00:00 +0000
asID: 8069
IP address blocks: 20.47.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0c:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jun 13 04:00:00 2020 GMT
Not After : Mar 3 05:00:00 2030 GMT
Subject: CN=ec5d559d-7dfe-4e4d-90ae-dd61ebf2555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:92:f5:0b:74:b7:bc:5e:96:a9:9a:7b:83:
a2:d2:de:81:cb:7d:a2:b2:fa:12:69:57:31:ac:8d:
dd:67:d5:b5:60:3f:bd:64:38:76:6c:03:bf:32:ed:
68:93:74:6e:39:14:b9:4e:42:b6:1e:91:9d:02:a8:
89:5a:9e:dc:92:d4:dd:09:b0:ad:aa:3b:b9:07:ca:
c8:ce:b4:9b:18:00:7a:5f:dc:86:4b:0e:45:b7:40:
b3:1a:0b:ba:10:47:7f:b6:7f:89:f8:e2:b6:55:8e:
f2:99:78:b2:e2:f4:12:60:f4:41:bb:b9:85:c1:df:
0d:9e:73:75:a9:fc:ee:46:d5:0f:0e:a2:34:68:1c:
28:dd:8e:2a:95:05:e2:2a:41:a1:4c:41:ac:f8:12:
71:29:4d:47:4a:a7:6b:7d:60:60:b5:f9:37:ad:0e:
14:34:fa:cd:47:4c:2a:7b:6f:e2:5c:b1:9a:b3:be:
db:e6:bd:6a:3a:63:8b:7d:df:3a:b6:ac:c3:6b:60:
9e:d1:8e:40:0e:25:84:b9:06:c6:86:b7:75:78:e1:
c0:2e:97:2a:d4:44:64:bd:96:35:7e:0b:35:30:3f:
3c:73:ff:d6:ed:58:2c:2d:aa:00:31:27:86:6f:96:
01:5f:f7:e0:dc:74:14:b0:39:ac:59:34:3a:b0:42:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:F6:BC:92:E8:09:09:CC:E4:3F:6E:E6:E4:B5:38:32:35:8B:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/feb1ee53-49b9-392f-9cc3-6d824088cd2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.47.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:d7:9e:9b:1c:11:7d:9f:04:da:d3:f5:c2:0d:2a:1f:2d:f2:
4d:9b:66:c5:1f:6b:91:9f:49:1b:cc:9f:d1:b3:06:ab:dd:83:
93:f5:c0:e5:34:b5:6d:d5:3c:f7:e1:2b:31:a5:2b:b2:00:c5:
3c:d3:72:de:15:20:4e:2c:61:d0:72:0f:bd:b2:99:7d:b5:46:
f2:f0:22:1e:e1:43:6b:70:07:91:18:dc:4e:f3:7d:02:4a:a9:
86:41:25:07:bd:9b:1b:da:8f:80:73:48:1e:cf:8d:49:72:9d:
95:b4:e3:a6:d8:01:8f:67:7d:cd:eb:db:0d:51:b7:3e:37:42:
d8:e3:89:9f:4f:3c:02:e7:a7:e8:f4:2a:01:b1:56:b8:cd:21:
07:18:e7:9f:a4:1e:20:7b:de:03:f2:5a:09:29:be:98:19:fe:
4d:d4:0f:f2:cf:ad:9f:0f:af:8a:2b:e7:36:f2:03:42:ca:e2:
65:65:1f:ce:87:24:8f:bf:a8:a2:3b:51:e5:3d:57:dc:75:ca:
7b:d4:bd:45:81:46:04:dd:bd:41:a4:af:0e:2f:27:68:ad:39:
0b:5a:4c:ac:b2:fc:9d:b7:f7:e0:8e:55:7d:04:d2:eb:ce:db:
c0:f4:fa:a3:23:16:24:6d:24:21:6f:15:a0:76:e9:17:2f:e5:
cc:4f:90:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:26 2025 by rpki-client